Malicious code in actions-next-bundle-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a738c63046c2bd1588c1bcc21eafd03d28a480f73643ea8b429ff5fa00da78b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Hitachi Ops Center Analyzer software for data analysis and analysis lies in the absence of a “Secure” flag in the HTTPS session cookies. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Hitachi Ops Center Analyzer software-related data analysis and processing programs lies in the absence of the “Secure” flag in the HTTPS session cookies. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected...

The vulnerability of the AV1 multimedia framework Gstreamer’s file analyzer code allows a perpetrator to execute arbitrary code.

The vulnerability of the AV1 multimedia framework’s file analyzer codec is related to the possibility of buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by creating specially crafted metadata in AV1 format files...

CVE-2024-32806

Cross-Site Request Forgery CSRF vulnerability in CoSchedule Headline Analyzer.This issue affects Headline Analyzer: from n/a through 1.3.3...

CVE-2024-32806 WordPress Headline Analyzer plugin <= 1.3.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in CoSchedule Headline Analyzer.This issue affects Headline Analyzer: from n/a through 1.3.3...

CVE-2024-32806

Technical details for CVE-2024-32806 are not publicly available in the provided documents. Monitor for updates.

WordPress plugin Headline Analyzer 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

CVE-2024-32806: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in CoSchedule Headline Analyzer.This issue affects Headline Analyzer: from n/a through 1.3.3...

PT-2024-24880

Name of the Vulnerable Software and Affected Versions CoSchedule Headline Analyzer versions 1.3.3 and earlier Description The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is...

CVE-2024-2493

Session Hijacking vulnerability in Hitachi Ops Center Analyzer.This issue affects Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.1-00...

CVE-2024-2493 Session Hijacking Vulnerability in Hitachi Ops Center Analyzer

Session Hijacking vulnerability in Hitachi Ops Center Analyzer.This issue affects Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.1-00...

CVE-2024-2493 Session Hijacking Vulnerability in Hitachi Ops Center Analyzer

Session Hijacking vulnerability in Hitachi Ops Center Analyzer.This issue affects Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.1-00...

CVE-2024-2493

CVE-2024-2493 : A session hijacking vulnerability affects Hitachi Op s Center Analyzer (versions 10.0.0-00 up to, but not including, 11.0.1-00). The root cause is a flaw allowing an attacker to hijack an active session, compromising access control. Impact details are described as a session hijack...

CVE-2024-2493: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

Session Hijacking vulnerability in Hitachi Ops Center Analyzer.This issue affects Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.1-00...

WordPress Headline Analyzer plugin <= 1.3.3 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Headline Analyzer versions = 1.3.3...

WordPress Headline Analyzer Plugin <= 1.3.3 is vulnerable to Broken Access Control

Software Headline Analyzer Type Plugin Vulnerable versions = 1.3.3 Fixed in 1.3.4 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-32806 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 151865fc08d6 Credits Majed Refaea Required...

PT-2024-3138

Name of the Vulnerable Software and Affected Versions Hitachi Ops Center Analyzer versions 10.0.0-00 through 11.0.1-00 Description The issue is related to the absence of the Secure flag in HTTPS session cookies, which can be exploited by a remote attacker to gain unauthorized access to protected...

The vulnerability of the HTML code analyzer in the ClamAV anti-virus program allows a hacker to trigger a service failure.

The vulnerability of the HTML-code analyzer in the ClamAV antivirus program is related to the unlimited distribution of resources. Exploiting this vulnerability allows a malicious actor to cause service failures by sending the antivirus software a specially crafted file containing HTML content fo...

The vulnerability of the USB HID analyzer used by Wireshark, which is used to analyze computer network traffic, allows a hacker to perform a service denial.

The vulnerability of the USB HID analyzer used by Wireshark for analyzing computer network traffic is related to memory release errors. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

ROS-20240408-05

RFC3164 analyzer vulnerability of Syslog-ng log processing utility is related to integer overflow. overflow. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service denial of service...